How to block Fortnite on your network
Most admins block epicgames.com and then hear that students are still playing. This guide starts from how Fortnite really connects, shows where to cut it off, and ends with a troubleshooting table for when it still gets through.
Why organisations block Fortnite
Fortnite is free to start, runs on almost every device and updates often. Those are good traits for a game and hard ones for a network team. These six reasons come up most in schools, offices and shared housing.
Lost learning and work time
Short matches fit neatly into breaks and, too often, into lessons and shifts.
Very large downloads
Installs and frequent updates are large. A handful of devices updating at once can saturate a school link.
Voice chat with strangers
Open voice and text chat in matches is a safeguarding concern for younger players.
Spending and scams
In-game currency is bought with real money, and "free currency" sites are a common phishing lure.
Real-time traffic at peak hours
Game traffic is sensitive to delay, so it competes hard with video lessons and calls.
Unmanaged software
On work PCs, the launcher is unapproved software with its own updater and services.
How Fortnite connects, and where to cut it off
A Fortnite session goes through five stages. Blocking the early stages is reliable. Blocking the last stage is not, because game servers run on public cloud hosting that you cannot block without breaking other services.
Dark circles mark the stages where a block is reliable. If a device cannot install, update or sign in, it cannot reach a match.
Verified Epic and Fortnite domains
| Domain | Role | Block for Fortnite? |
|---|---|---|
epicgames.com | Epic account sign-in, launcher, store, downloads and most game services on its subdomains | Yes |
fortnite.com | Official Fortnite site, news, item shop pages and creator pages | Yes |
epicgames.dev | Epic Online Services used by Fortnite and many other games | Yes, if no other games are allowed |
unrealengine.com | Unreal Engine, used in game design and 3D courses | Only if no course uses it |
Do not block the port list. Epic's own help pages list several ports for the launcher and a wide UDP range for game traffic. Other apps use the same range, so a port block breaks voice, video and updates across the network. Cut Fortnite off at stages 1 to 3 instead.
Epic and Fortnite hostnames change with updates and events. Look up unfamiliar hosts in your logs with the domain category lookup, and block the Gaming category so related domains are covered.
Which method blocks which part
No single method covers every route. This table shows what each layer can stop, so you can see which combination you need.
| Method | Website | Launcher download | Sign-in | Installed game | Cloud gaming | Mobile data |
|---|---|---|---|---|---|---|
| Router block list | Yes | Yes | Mostly | Partly | No | No |
| DNS filter with categories | Yes | Yes | Yes | Mostly | Yes | No |
| Firewall with app control | Yes | Yes | Yes | Yes | Yes | No |
| Intune on Windows | Yes | Yes | Yes | Yes | Yes | Yes (laptop) |
| Google Admin | Yes | n/a | Browser | App block | URL list | Yes |
| MDM on phones | Yes | n/a | Partly | App block | With filter | Yes |
Router or small office
- Add epicgames.com, fortnite.com and epicgames.dev to the router's blocked sites.
- Better: point the router's DNS at a filtering resolver with Gaming blocked.
- Clear device DNS caches or restart them.
Fine for homes and small clubs. Signed-in sessions can survive for a while.
DNS filter
- Block the Gaming category and the domains above for student or staff policies.
- Block VPN / Proxy / Anonymizers in the same policy.
- Force port 53 to your resolver; block DNS over TLS on 853.
- Set browsers to use system DNS by policy.
Covers phones and consoles on Wi-Fi. Read DNS filtering vs web filtering.
Firewall
- Block the games URL category and add the Epic domains as a custom block.
- Add the Fortnite and Epic Games application signatures to an app control block rule.
- Block QUIC so TLS server names are visible.
- Optional: bandwidth-limit the games category instead of blocking, for staff networks.
Most next-generation firewalls have a games category and game signatures.
Intune on Windows
- Push epicgames.com and fortnite.com to the browser URL block list.
- Block the Epic Games Launcher by publisher with application control, and remove local admin rights.
The strongest option for Windows laptops, on or off the network.
Google Admin
- Add the Epic domains to Chrome URL blocking for student units.
- Block the Fortnite app if it appears in your Play allowlist.
- Add cloud gaming sites to URL blocking, or use a category filter that covers them.
Chromebooks cannot install the PC game, so cloud gaming is the main route there.
MDM
- Block or hide Fortnite and any third-party store that offers it, on supervised iOS and fully managed Android.
- Restrict app installs to approved apps only.
- Push a device-wide DNS or filter profile for mobile data.
Fortnite's availability in mobile app stores varies by region and over time, so check what your devices can see.
Block, throttle or schedule? Pick the policy first
A full block is not the only option. On staff, residential or guest networks, many organisations prefer to limit the impact of Fortnite rather than ban it. Choose before you configure, because each option uses different features.
| Option | How it works | Good for | Trade-off |
|---|---|---|---|
| Full block | Gaming category, Epic domains, app signature and launcher blocked. | Student networks, work PCs, kiosks. | Needs an exception group for game design labs. |
| Throttle | A traffic shaping rule caps the games category and launcher downloads to a set share of the link. | Staff Wi-Fi, halls of residence, hotels. | Games still run; only the impact on others is reduced. |
| Download window | Launcher and update hosts are blocked during the day and allowed overnight. | Residential schools, shared housing, small offices. | Relies on schedules in your firewall or filter. |
| Schedule | Gaming blocked in lesson or work hours, allowed in free time. | Boarding schools, youth centres, libraries. | Users quickly learn the boundaries and plan around them. |
Consoles, guest Wi-Fi and BYOD
Consoles
Consoles follow your DNS and firewall rules like any device. In residences and staff housing, put them on their own network segment with its own policy.
Guest networks
A throttle is usually kinder than a block for visitors. Keep malware and adult categories blocked regardless.
Personal laptops
You cannot remove the launcher, but DNS and firewall rules on the BYOD SSID stop sign-in and downloads while on your Wi-Fi.
Shared offices
In coworking and multi-tenant buildings, apply the policy per tenant VLAN so one company's choice does not affect another.
Installed game vs browser: two routes to the same match
Fortnite reaches users in two very different ways. One needs an installed client; the other needs only a browser tab. Your rules must cover both.
Installed clients
- PC via the Epic Games Launcher, consoles, and mobile where available.
- Need Epic sign-in and downloads, so domain blocks work well.
- Application control stops the launcher on managed PCs.
- Already-signed-in clients may play briefly until tokens refresh.
Cloud gaming in a browser
- The game runs on a remote server and streams to the browser as video.
- Traffic goes to the cloud gaming provider, not to Epic.
- Works on Chromebooks and locked-down PCs that cannot install anything.
- Only a Gaming category that covers cloud gaming services closes it.
Game design courses. Unreal Engine classes need Epic sign-in and unrealengine.com. Put lab machines in their own group: allow those services, keep Gaming blocked, and block the Fortnite client with application control.
"Fortnite still works": troubleshooting table
When a block seems to fail, the cause is usually one of these. Work down the list from the top, and test after each change so you know which fix made the difference.
Bypass routes to close
VPN apps and extensions
Block the VPN / Proxy / Anonymizers category and VPN signatures, and restrict extension installs.
Cloud gaming sites
Covered by the Gaming category. Keep it blocked wherever Fortnite is blocked.
Custom DNS
Redirect or drop all outbound DNS that is not going to your resolver.
Phone hotspots
Out of network reach. Device rules on school laptops still apply.
How to test the Fortnite block
Test from a cold start on a standard device and account. Restart the device first so cached sessions do not hide a gap. Repeat the tests after big game updates, when new hosts often appear.
- Run
nslookup www.epicgames.comandnslookup www.fortnite.com: both return a block. - Open epicgames.com and fortnite.com in the browser: the block page appears.
- Try to download and run the Epic Games Launcher: the download or the launch is blocked.
- On a test PC with the launcher already installed, try to sign in: sign-in fails.
- Open a cloud gaming site in Chrome on a Chromebook: blocked as Gaming.
- Try a free VPN extension: it fails to connect.
- On a lab machine in the Unreal exception group, sign in to Unreal Engine: it works.
- Check logs for Gaming and application hits by device, to spot devices that keep trying.
Category-based blocking that keeps up with Fortnite
Fortnite sits at the centre of a busy web: stats trackers, cosmetics shops, map code sites, creator pages, cloud play and scams. New ones appear every week. A daily-updated Gaming category handles them without manual lists.
Gaming
Fortnite, Epic, game portals and cloud gaming services.
VPN / Proxy / Anonymizers
The category that stops the block being bypassed.
Streaming Media
Game streams and video, for networks where bandwidth is the main concern. See streaming.
Malware / Phishing / Suspicious
Free-currency scams and fake account pages.
Firewall, DNS filter and edtech vendors license the data for their products, with exports such as DNS RPZ, hosts files and firewall external dynamic lists. Schools can also read K-12 school web filtering.
Related guides: how to block Roblox and how to block Steam.
Fortnite blocking FAQ
Why does Fortnite still work after I blocked epicgames.com?
Usually because a session was already signed in, because game servers are reached by IP on public cloud hosting, or because the student is playing through a cloud gaming site in a browser. Block the Epic sign-in and service domains, the Gaming category and the launcher itself.
Should I block the ports Fortnite uses?
No. Epic lists a wide UDP range for game traffic that other apps also use. Blocking it breaks voice, video and other services. Cut Fortnite off at sign-in and download instead, by domain, category and application.
Will blocking Epic Games break Unreal Engine classes?
It can, because Unreal Engine is downloaded and signed in through Epic services. Leave unrealengine.com and the Epic sign-in open for a lab group, and block Fortnite through application control on those machines.
Can students play Fortnite in a browser?
Yes, through cloud gaming services that stream the game to a browser tab. The traffic goes to the cloud gaming provider, not Epic. Block the Gaming category, which covers cloud gaming sites, to close this route.
How do I stop the Epic Games Launcher being installed?
On managed Windows devices, use Intune and an application control policy that blocks the launcher by publisher or file. Remove local admin rights so users cannot install games at all.
Does a category database help with Fortnite?
Yes. Fortnite is surrounded by tracker sites, cosmetics shops, scam pages and cloud play sites. A Gaming category refreshed every day blocks them as they appear.
Can I block Fortnite but allow other Epic Games titles?
Partly. Network rules on epicgames.com affect every Epic title because they share sign-in and the launcher. To allow other titles, leave Epic services open for that group and block the Fortnite client with application control and the Fortnite firewall signature.
Will blocking epicgames.dev affect other games?
It can. Epic Online Services provides sign-in, friends and matchmaking for many games from other studios, not only Fortnite. If you allow any of those games, leave epicgames.dev open for that group and block Fortnite by application instead.
Do consoles on my Wi-Fi follow the block?
Yes, for DNS and firewall rules, because consoles use your network like any other device. Consoles cannot be managed by Intune or MDM, so the network layer is the only control for them.
Gaming and bypass categories for your product
License 120 million categorized domains to run inside your firewall, DNS filter or edtech platform. Starter database tiers from $999; enterprise and OEM licences are quoted per deployment.
License the databaseFortnite, Epic Games, Epic Games Launcher, Epic Online Services and Unreal Engine are trademarks of Epic Games, Inc. Microsoft and Intune are trademarks of Microsoft Corporation; Google, Chrome and Chromebook of Google LLC.
They are used here only to identify the products discussed. Web Filtering Database is not affiliated with, sponsored or endorsed by any of these companies.